Endpoint Protection

Some GUP questions:

1. Is it possible to configure where a Group Update Providers stores its Group Updates? Technote 102541 states that the updates are stored in
   C:\Program Files\Symantec\Symantec Endpoint Protection\SharedUpdates
but we need to change that (we keep our C:\ drives for servers small, and install as much as possible on more flexible storage)

2. According to the documentation, a client will look for a GUP on its subnet, and if it can't find one, it will use the server you identify when configuring.  Is that subnet defined in the traditional way, by the client's ip and subnet mask?  Is there any way to change that?  For instance, can you tell a GUP which subnets it is responsible for?  Or, better yet, is Group Update AD Sites and Services aware?

I think I know GUP well enough to say "No" for all of these, but I would love to be wrong.

Paul

Hello,

The directory for GUP storage is about SEP installation directory. If you install SEP to D:\ drive than GUP path changed to D:\Program Files\Symantec Endpoint Protection\... 

For second question,you can not tell the GUP client what subnet it responsible,GUP can be configured for groups that includes,as you said you can push it to another ip if the clients not found GUP but no another option.

Regards,

Oykun

1. Yes and no. A better way of writing the path is: %SEP Directory%\SharedUpdates. You can configure where the client is installed, which therefore changes the directory where the GUP content is stored. But don't re-install all your clients if you have space limits... just use the GUP options to limit the maximum amount of content it will store. I recommend 150MB at the very lowest. 

2. Yes... the subnets are defined traditionally. "Can you change that?" No. You cannot change how it reads the subnet. You cannot change whether or not it considers the subnet. You can, however, configure GUPs with the "Single GUP", which will not use any subnet checking (it just goes straight to whatever you define).